ai-automation-workflows

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill's example scripts embed file contents and command output directly into API inputs, logs, and a webhook payload (e.g., using $(cat $file), "$result", and "$*"), which can cause secrets to be included verbatim and exfiltrated.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill instructs workflows that write to system-wide locations (/var/log, /output) and suggests cron installation, which can modify system state and may require elevated privileges even though it does not explicitly request sudo.